- dovecot - dovecot.org

[Dovecot] Understanding dovecot ACLs
by Achim Hut 11 Feb '09

11 Feb '09

Hello List I am running a Cyrus IMAP that needs to be replaced. Geting a Dovecot IMAP up and running was surprisingly simple. My configuration is close to Johnny Chaddas Howto at http://johnny.chadda.se/2007/04/15/mail-server-howto-postfix-and-dovecot-wi… Its a Dovecot 1.1.10 on FreeBSD 6.4 Anyway, while basic setup was easy, i stuck in a couple of details like quota, managesieve, etc. Actual major problem and showstoper is understanding the ACLs the confuses me. So i need a hint to be guided in the right direction. What i need is a scenario, where user1 can get (for example) full access to the folders of user2, read-only access to user3 etc. A real world example: Secretary has full access to the mailfolders of her boss, boss has read-only acces to the sales-department folder. My questions: 1) is the possible? 2) can it be done with dovecot-acl files? 3) Namespaces: is it enough to have the private namespace for the job or do i need another namespace? 4) if yes, how should this namespace look like? Thanks for the help Achim

2 1

Re: [Dovecot] [Dovecot-news] v1.2.beta1 released
by Timo Sirainen 11 Feb '09

11 Feb '09

On Feb 10, 2009, at 10:45 PM, Reuben Farrelly wrote: > Feb 11 14:34:41 tornado dovecot: pop3-login: Login: user=<htperham>, > auth-method=PLAIN, remote=203.29.67.56 > Feb 11 14:34:41 tornado dovecot: Panic: POP3(htperham): Trying to > allocate 0 bytes .. > I can replicate this buy just telnetting to port 110, entering the > user and pass commands - as soon as I hit enter it dies :-( Fixed: http://hg.dovecot.org/dovecot-1.2/rev/22d70947597c

1 0

[Dovecot] dovecot logs to audit.log not to maillog
by Ralf Heidenreich 11 Feb '09

11 Feb '09

Hello, I have a curious phenomenon. Dovecot logs normally to /var/log/maillog. If I restart my server, dovecot loggs to /var/log/audit/audit.log. If I restart dovecot, dovecot loggs to /var/log/maillog again. And I think, wenn logrotate is restarting, dovecot logs to audit.log. But I don't know why. Any Ideas? greetings Ralf

2 3

[Dovecot] mailing lists and Dovecot deliver (lda)
by Roderick A. Anderson 11 Feb '09

11 Feb '09

I'm trying to figure out a way, or if it is even possible, to use mailing list software (majordomo2) on a Postfix + Dovecot + virtual mailboxes system. And where I should be looking. The examples on the Postfix site don't seem to address a purely virtual mailboxes system and I haven't found anything about doing it with deliver. I think I'm at the wrong tree (Dovecot deliver) and should be pestering the Postfix list. FTR, I host some sites for not-for-profits and they have asked about setting up lists. So far I've dodged the question but would like to attempt it now. Thanks, Rod --

2 2

[Dovecot] I've moved to US
by Timo Sirainen 10 Feb '09

10 Feb '09

I thought about saying this in v1.2.beta1 release annoouncement, but looks like it'll take a few more days. So I've moved to Blacksburg, Virginia and I'm now working for Mailtrust the rest of this year. Here's some talk about it: http://mailtrust.com/blog (A bit stupid looking picture, but then again all my pictures seem to be that way so I didn't bother getting a new one taken.) And if it's not clear from that blog: Pretty much everything I do here will be Dovecot improvements that will be released as open source. Mailtrust has actually been paying for Dovecot features for about 3 years now.

20 23

[Dovecot] redelivered mail results in mail-forwarding-loop
by Reto Glauser 10 Feb '09

10 Feb '09

I try to redeliver mail for the following reason: Once in a while a user receives a mail which isn't correctly recognised as SPAM/HAM. He'll move the mail into a specific folder (say: retrain-as-spam/retrain-as-ham) and a script will retrain the mail. What I'd like to do is to redeliver the mail in order for correct (re)delivery (e.g. sieve scripts). Using sendmail to redeliver the mail I'm able to re-run the spam tests which will add it's SPAM headers and dovecot/sieve will be able to correctly file the message. I tried to just resend the mail: # /usr/sbin/sendmail -f foo@bar -v -oi foo@bar < mail but this results in a Diagnostic-Code: X-Postfix; delivery via dovecot: mail forwarding loop for foo@bar The problem is that the mail already has a "Delivered-To: foo@bar" line. The above is working when the "Delivered-To" line is being removed, and my question is if this can't be done automatically?

2 3

[Dovecot] [Fwd: Re: dovecot logs to audit.log not to maillog]
by Ralf Heidenreich 10 Feb '09

10 Feb '09

Hello, now I have done this: under http://wiki.dovecot.org/Logging?highlight=(logging) Rotating Logs is the following string ----------------------- /bin/kill -USR1 `cat /var/run/dovecot/master.pid 2>/dev/null` 2> /dev/null || true ------------------------ This string I have insert in /etc/logrotate.d/syslog under the lines: postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true /bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null || true So Dovecot will be restarted, after the log rotates. I hope, the phenomenon is now solved. greetings ralf -------- Original-Nachricht -------- Betreff: Re: [Dovecot] dovecot logs to audit.log not to maillog Datum: Tue, 10 Feb 2009 09:07:26 +0100 Von: Ralf Heidenreich <ralf(a)lx-work.de> An: Timo Sirainen <tss(a)iki.fi>, dovecot(a)dovecot.org Referenzen: <499035E7.8090506(a)lx-work.de> <1234228183.6132.134.camel@timo-desktop> Hello, here is my dovecot.conf ------snip---------- log_path = /var/log/maillog info_log_path = /var/log/maillog -------snip------------- Is it possible, than logrotate rotates the maillog, and dovecot wants to write to it, if the maillog is not available at the moment, dovecot writes to audit.log? I don't know. Have you any ideas? greetings ralf Timo Sirainen schrieb: > On Mon, 2009-02-09 at 14:55 +0100, Ralf Heidenreich wrote: >> Hello, >> >> I have a curious phenomenon. >> Dovecot logs normally to /var/log/maillog. >> If I restart my server, dovecot loggs to /var/log/audit/audit.log. >> If I restart dovecot, dovecot loggs to /var/log/maillog again. >> And I think, wenn logrotate is restarting, dovecot logs to audit.log. >> But I don't know why. >> Any Ideas? > > By default Dovecot logs to syslog. Maybe your syslog configuration > changes after boot? >

1 0

[Dovecot] Dovecot / Exim with Multiple Domiains
by Marc Perkel 10 Feb '09

10 Feb '09

I'm using a very old scheme for doing multiple domains using an old Linuxconf based setup. Each domain has it's own passwd/shadow file. It works but I need something new and modern and has a web interface and perhaps a mysql backend or something else good. So - what are people using out there for managing email users and domains? Thanks in advance.

2 1

[Dovecot] Imap unlink "failed, is a directory".
by Dovecot＠corwyn.net 10 Feb '09

10 Feb '09

Dovecot 1.1.8-0_85.el5 I'm seeing this set of messages repeat every 15 min. My best guess is the user tried to delete an imap folder and is failing? Feb 9 20:05:58 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=10.0.0.1, lip=192.168.250.80, TLS Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): unlink(/var/spool/mail/example.com/user/Maildir/cur/cur:2,ST) failed: Is a directory Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): unlink(/var/spool/mail/example.com/user/Maildir/cur/new:2,ST) failed: Is a directory Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=66/623 From here: http://wiki.dovecot.org/VirtualUsers#homedirs I suspect it's a problem with access to the home directory. The users have a home directory: /var/spool/mail/domain/user (or at least that's where Maildir ends up). vuser has 700 access to that entire structure (everything under var/spool/mail/). Users log in with mysql accounts. /etc/passwd: ... dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin vacation:x:65501:65501::/var/spool/vacation:/sbin/nologin vuser:x:1015:105:,,,:/home/vuser:/bin/false ... dovecot-sql.conf driver = mysql connect = host=localhost dbname=postfix user=postfix password=xxxxxxx default_pass_scheme = MD5-CRYPT password_query = SELECT username, domain, password FROM mailbox WHERE username = '%u' AND domain = '%d' AND active = '1' user_query = SELECT 1015 as uid, 105 as gid, '/var/spool/mail/%d/%n' as home, 'maildir:/var/spool/mail/%d/%n/Maildir' as mail, concat('*:storage=', quota, 'B') as quota_rule FROM mailbox WHERE username = '%u' AND domain = '%d' and active = '1' dovecot -n # 1.1.8: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 Red Hat Enterprise Linux Server release 5.2 (Tikanga) ext3 ssl_cert_file: /etc/httpd/certs/example_invtitle_com.crt ssl_key_file: /etc/httpd/certs/example.com.key.no.password login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 1015 mail_gid: 105 mail_location: maildir:/var/spool/mail/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: static socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vuser group: vuser plugin: quota: maildir quota_rule: *:storage=102400000 quota_rule2: Trash:storage=100M Rick Steeves http://www.sinister.net "The journey is the destination"

3 3

[Dovecot] Authentication woes.
by Roderick A. Anderson 10 Feb '09

10 Feb '09

I'm still searching but hoping someone can offer a clue-stick. Long story short! I had a server crash suddenly and all I can get at are the files. Built a new host and copied the data and config files over, correcting ownership and permissions (hopefully) as I went. But now I can't get logged in. Messages in /var/log/dovecot/dovecot-info.log, without saslauthd running, are like this. dovecot: Feb 03 08:55:46 Info: auth(default): passwd-file(raanders(a)aesoft-sbcs.com,66.193.34.88): no passwd file: username_format=raanders /var/mail/vhosts/aesoft-sbcs.com/passwd dovecot: Feb 03 08:55:48 Info: auth(default): client out: FAIL 1 user=raanders(a)aesoft-sbcs.com dovecot: Feb 03 08:55:48 Info: auth(default): client in: AUTH 2 PLAIN service=IMAP secured lip=216.64.180.226 rip=66.193.34.88 resp=AHJhYW5kZXJzQGFlc29mdC1zYmNzLmNvbQBrNnpiZTQy dovecot: Feb 03 08:55:48 Info: auth(default): passwd-file(raanders(a)aesoft-sbcs.com,66.193.34.88): no passwd file: username_format=raanders /var/mail/vhosts/aesoft-sbcs.com/passwd dovecot: Feb 03 08:55:50 Info: auth(default): client out: FAIL 2 user=raanders(a)aesoft-sbcs.com dovecot: Feb 03 08:55:54 Info: imap-login: Aborted login: user=<raanders(a)aesoft-sbcs.com>, method=PLAIN, rip=66.193.34.88, lip=216.64.180.226, TLS The passwd file exists and I'm using the correct password. dovecot -n as an attachment. More info this is a semi-good attempt at a mail server for virtual domains. _It was working._ Any ideas as to why dovecot says the file doesn't exist? TIA, Rod # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log protocols: imap imaps listen: *:143 ssl_listen: *:993 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes valid_chroot_dirs: /var/mail first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_access_groups: mail mail_location: maildir:~/Maildir mail_debug: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes auth default: mechanisms: plain login CRAM-MD5 default_realm: aesoft-sbcs.com master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /var/mail/vhosts/%d/passwd.masterusers pass: yes master: yes passdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd userdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail plugin: sieve: /var/mail/vhosts/%d/%n/dovecot.sieve

2 1

[Dovecot] Dovecot 1.1.11 segfaults on auth configuration error
by Sebastian Kayser 10 Feb '09

10 Feb '09

Hi, i have compiled & packaged Dovecot 1.1.11 on Solaris 8 x86 with Sun Studio 11 and installed the result on Solaris 10 x86 zone. When i now configure auth mechanisms other than "login" or "plain" while only providing pam as the passdb, Dovecot segfaults on startup. I know that my configuration is wrong here, but i guess this still qualifies as a bug. Remedy would be appreciated. # /opt/csw/sbin/dovecot -F dovecot: Feb 06 22:56:24 Info: dovecot v1.1.11 starting up dovecot: Feb 06 22:56:25 Error: child 26870 (auth) returned error 89 (Fatal failure) Segmentation Fault (core dumped) # /opt/SUNWspro/bin/dbx -f /opt/csw/sbin/dovecot core (dbx) where =>[1] hash_lookup(table = (nil), key = 0x68f6), line 159 in "hash.c" [2] child_process_lookup(pid = 26870), line 31 in "child-process.c" [3] log_it(log_io = 0x80b8598, line = 0x80b7d4a "DIGEST-MD5 mechanism can't be supported with given passdbs", continues = 0), line 129 in "log.c" [4] log_write_pending(log_io = 0x80b8598), line 52 in "log.c" [5] log_read(log_io = 0x80b8598), line 191 in "log.c" [6] log_deinit(), line 331 in "log.c" [7] auth_process_destroy(p = 0x80b86f8), line 357 in "auth-process.c" [8] auth_process_input(process = 0x80b86f8), line 244 in "auth-process.c" [9] io_loop_handler_run(ioloop = 0x80b3518), line 204 in "ioloop-poll.c" [10] io_loop_run(ioloop = 0x80b3518), line 336 in "ioloop.c" [11] main(argc = 2, argv = 0x80478dc), line 599 in "main.c" # /opt/csw/sbin/dovecot -n # 1.1.11: /etc/opt/csw/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc log_path: /dev/stderr login_dir: /var/opt/csw/run/dovecot/login login_executable: /opt/csw/libexec/dovecot/imap-login auth default: mechanisms: plain digest-md5 debug: yes passdb: driver: pam userdb: driver: passwd Please let me know in case there is any other information required to nail down the culprit. Thanks. Sebastian

2 2

[Dovecot] [patch] 'c' and 'd' in setacl
by Sascha Wilde 09 Feb '09

09 Feb '09

Hi Timo, Hi *, I just recognized that the new imap-acl plugin in dovecot 1.2 does not know the obsolete rights 'd' and 'c' when setting. According to RFC 4314 section 2.1.1.: If a client includes the "d" right in a rights list, then it MUST be treated as if the client had included every member of the "delete" right. and If a client includes the "c" right in a rights list, then it MUST be treated as if the client had included every member of the "create" right. Unfortunatly there are actually clients which depend on this behavior. I attached a rather rough[0] patch which implements this. cheers sascha [0] I don't like the use of static indexes witch imap_acl_letter_map but currently I wasn't able to decide on a more elegant solution. -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

4 5

[Dovecot] Rebuild folder listing?
by Roderick A. Anderson 09 Feb '09

09 Feb '09

I don't know what to call what I'm trying to do so I'll explain the situation. I had a total complete crash of the Linux-Vserver system that was hosting a Postfix+Dovecot guest with a three domains and 1-5 accounts per domain. Lots of mail though. Before it completely melted down I as able to get to the data (messages) and save them and the configuration files for both Dovecot and Postfix. I now have a replacement system up and running and have copied the directories onto it. I can log in to the accounts but I don't see the folders (I use Thunderbird as a MUA). Attempts to "subscribe" and "refresh" the list give me no results. No list of folders. What should I do? I'm thinking I could delete the dovecot files: dovecot.index, dovecot.index.cache, dovecot.index.log, dovecot-uidlist, subscriptions, and while I'm at it possibly dovecot-keywords. Then access the account(s) and Dovecot will rebuild them with the true/correct information. Am I heading anywhere near the right direction? TIA, Rod --

2 3

Re: [Dovecot] Disconnected Log messages I'd like to disable?
by dovecot＠corwyn.net 09 Feb '09

09 Feb '09

I understand what the log message means. I currently have dovecot logging flipped up about as high as I can have it set in about every way that I can. What I'd like to know is which logging setting can I lower to not see this message (or if there is one), and what OTHER things won't log if I decrease that logging setting. thx. rick At 08:43 AM 2/9/2009, Steffen Kaiser wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Mon, 9 Feb 2009, dovecot(a)corwyn.net wrote: > >>Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): >>Disconnected: Logged out bytes=479/51185 > >Search the archive for a mail from Timo few times ago, it just means >that the user logges out (LOGOUT command). > >Bye, > >- -- Steffen Kaiser >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.6 (GNU/Linux) > >iQEVAwUBSZAzIHWSIuGy1ktrAQKQDQf/S0zCmCuQ+xtJI0o3goUdDo0++yGXRyCp >fGdDKQ7YnOL1VOM1FnBjGJkhfYs/K6WuVFqQzqVrBjCoItsFWIvZCoeGWeHYPQf1 >6qRYngFSJLfdFDg9Ift5UvCnIS9W5jYv6otkJlddoH0SHeypSb9RZbPR20Ywf2da >whV4bB41W8ys/upUkaBd7+gKKcYcbSp+l3ZBXCrLnDbj7pCISnv2sENkTz2df1eE >wQSgpnbazmr9ePCx1cWDdvN5Wy9RN5KoGc+H0axtI7Uav5tkP7nVJ8GSmqBBH54r >nkvOrtmAjTMwp4MbYh6x2wejZJAY8lp72wQOeg3sJak32f3la0ZLgw== >=mLed >-----END PGP SIGNATURE-----

3 2

[Dovecot] Disconnected Log messages I'd like to disable?
by dovecot＠corwyn.net 09 Feb '09

09 Feb '09

I regularly get this message in my logs: Feb 9 08:03:59 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=24.213.158.249, lip=192.168.250.80, TLS Feb 9 08:04:49 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=189/468 Feb 9 08:06:09 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=24.213.158.249, lip=192.168.250.80, TLS Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 (which I think is from my blackberry users) I'd like to not log Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 Suggestions? rick Rick Steeves http://www.sinister.net "The journey is the destination"

2 1

[Dovecot] v1.1.11 released
by Timo Sirainen 09 Feb '09

09 Feb '09

http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz.sig Hopefully this v1.1 release will last a few months. - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients not to save keywords. - dbox: INTERNALDATE and save date was returned wrong for converted maildir files. - auth: Using "username" or "domain" passdb fields caused problems with cache and blocking passdbs in v1.1.8 .. v1.1.10. - userdb prefetch + blocking passdbs was broken with non-plaintext auth in v1.1.8 .. v1.1.10. - If mail_chroot is set, don't fail at startup in dump-capability.

10 16

[Dovecot] Maildir structure question
by Nicolas KOWALSKI 08 Feb '09

08 Feb '09

Hello, About the INBOX location when using maildir, in the wiki, http://wiki.dovecot.org/MailboxFormat/Maildir, I can read: " Directory Structure ~/Maildir/new, ~/Maildir/cur and ~/Maildir/tmp directories contain the messages for INBOX. The tmp directory is used during delivery, new messages arrive in new and read shall be moved to cur by the clients. " But in my Maildir, I see this: niko@petole:~$ ls -la Maildir/ total 144 drwxr-xr-x 35 niko niko 4096 2009-02-06 08:37 . drwxr-xr-x 25 niko niko 4096 2009-02-06 10:26 .. drwxr-xr-x 5 niko niko 4096 2009-02-06 09:16 .INBOX ... There are no 'cur', 'new' and 'tmp' directories in ~/Maildir, as written in the wiki, but instead this .INBOX directory which contains these 'cur', 'new' and 'tmp'. Is this expected ? Thanks. My configuration: petole:~# dovecot -n # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28.3 i686 Debian 4.0 ssl_cert_file: /etc/ssl/certs/petole.demisel.net.pem ssl_key_file: /etc/ssl/private/petole.demisel.net.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_location: maildir:~/Maildir namespace: type: private separator: / list: yes subscriptions: yes auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 -- Nicolas

3 8

[Dovecot] Best Imap Transfer Tool?
by Neil 08 Feb '09

08 Feb '09

So I'm looking to do a migration of my IMAP mailboxes, and I'm looking for the best tool to use. I used to use the uw-mailutil tool, a while ago, but that was a bit coarse of a tool. More recently I've used imapsync, but that was giving me some errors. I've sort of tracked those down; but I was wondering if anyone else had any other recommendations...? Thanks.

2 2

[Dovecot] Migrating mail between servers
by Knute Johnson 07 Feb '09

07 Feb '09

I've currently got dovecot running on a Fedora server and I want to move all my mail to my new server running ubuntu. Both use mbox and I have IMAP working in both. Can I just copy the ~user/mail directory and /var/mail/user file and replace them in the new server? Thanks, -- Knute Johnson "The urge to save humanity is almost always a false front for the urge to rule." H.L. Mencken

3 2

[Dovecot] FreeBSD pam auth problems
by Dmitry Samersoff 07 Feb '09

07 Feb '09

I'm impressed by dovecto and try to upgrade my home system from wu-imapd running there for last 5 years to dovecot. It's straghtforward FreeBSD setup with ssl-only auth, inboxes in /var/mail and user mail under %h/Mail But I get some strange error: Fatal: userdb didn't return a home directory, but mail location used it (%h): %h/Mail:INBOX=/var/mail/%u Thank you in advance! -Dmitry mircat:dovecot#./sbin/dovecot -n # 1.1.10: /usr/local/dovecot/etc/dovecot.conf # OS: FreeBSD 6.2-RELEASE i386 base_dir: /var/run/dovecot log_path: /var/log/dovecot_main.log info_log_path: /var/log/dovecot_info.log listen: *:143 ssl_listen: *:993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_user: nobody login_chroot: no login_max_processes_count: 30 max_mail_processes: 30 first_valid_uid: 1 mail_uid: smmsp mail_gid: smmsp mail_location: mbox:%h/Mail:INBOX=/var/mail/%u mail_debug: yes mbox_lazy_writes: no auth default: failure_delay: 1 verbose: yes debug: yes worker_max_request_count: 1 passdb: driver: pam args: imap -- Dmitry Samersoff dms(a)samersoff.net, http://devnull.samersoff.net * There will come soft rains ...

2 4

[Dovecot] Info regarding conversion of mbox to maildir
by Scott Silva 06 Feb '09

06 Feb '09

When I finally decide to convert to maildir, will I have to set up namespaces during the conversion, or will dovecot figure out where everything is by itself? Should I set up deliver to go to maildir/ globally, or per user? I have considered using the convert plugin, if there are not a lot of negatives. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!!

2 3

[Dovecot] Public namespace permissions documentation/questions
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello Timo, In my trials to setup a shared namespace with dovecot-1.1.8/LDAP passdb/userdb (prefetch)/Maildir, I found out that : 1) ACL are mandatory (at least if the acl plugin is triggered in dovecot.conf) Am I correct ? I'm still not sure if we can do without ACL at all (only with unix permissions and system_user userdb extra field). 2) the system_user userdb extra field is supposed to be ...the logname of the user the secondary groups of whom we want to check ! i.e. if user foobar belongs to secondary groups foogid, zgid, wgid and doveshared uid=xxx(foobar) gid=yyy(foogid) groups=zzz(zgid),www(wgid),vvv(doveshared) and we dovecot to take them into account, we have to make the usedb return the system_user extra field with the value foobar. Seems obvious now and said this way, but looking at the wiki : "system_user: If this is given, the user's groups are read from /etc/group (or wherever NSS is configured to taken them from)." I thought 'system_user' was a flag (a boolean) which, when triggered made dovecot look for the secondaries group of the user (user whose name is already known). a) am I correct ? b) why isn't system_user such a boolean ? Is there a case where we'd want system_user to be different than the user dovecot runs as at the moment the check takes place ? 3) same idea with acl_groups : since this extra_field holds a list of groups for the ACL plugin, why not rely on the native unix groups of the system the user belong to ? Thanks (and sorry for the 2 previous threads where I was blindly confused by the system_user thing). -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] dovecot-shared file
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello Timo, About the dovecot-shared file, the wiki says : "Unless you're using a single UID for all the users, you'll need to have a dovecot-shared file in each shared maildir. The group and the file permissions for new files inside the maildir are taken from the dovecot-shared file." but says the following too : "With Maildir dovecot-shared file controls if the \Seen flags are shared or private. If you don't have the file, they're shared." The question is "does it make sense (or is it even possible) not to have the file ?". Why would one not have the file and how would it work then ? By relying on the set-gid bit and umask ? Finally, the wiki says : "If you do have the file, the \Seen flag state is stored only in the user's index files. By making each user have their own private index files, you can make the \Seen flag private for the users." So, my undersanding is that : 1) you have the file 1.a) if INDEX points to the same place, flags are shared but are lost if indexes are lost 1.b) if INDEX points to some user dependant place, flags are private but are lost if indexes are lost 2) you don't have the file flags are shared, whatever INDEX points to and, since they're stored in filename, survive indexes lost. but does shared-mailboxes even work if we don't have that file ? maybe only if the set-gid bit and umask does what the file would have done ? So maybe, if you want to share flags, 2) is safer dans if you want them private, 1.b) is the only choice ? thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Shared subscription, acl-list and uidvalidity(s)
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello, I'm running dovecot-1.1.8/Maildir/ACL plugin. I sucessfully set up a Maildir shared between users of the unix group 'doveshared' via a public namespace, unix permissions and ACL files. The location of my public namespace is /path/to/public. I tried 2 sub-setups : First setup ---------- drwxrws--- 4 root doveshared 4096 Jan 30 13:39 public -rw-r----- 1 root doveshared 18 Jan 30 13:38 public/subscriptions I first connect (in Thunderbird) to dovecot with user 'hummel', then with user 'doveimap'. The following files are created in /path/to/public/ : -rw------- 1 doveimap doveshared 40 Jan 30 14:03 dovecot-acl-list -rw------- 1 hummel doveshared 8 Jan 30 14:03 dovecot-uidvalidity -rw------- 1 hummel doveshared 0 Jan 30 14:02 dovecot-uidvalidity.4982fa7a I've got my own idea about what they're used for, but can you explain what they are supposed to be ? I guess the uidvalidity files are UIDVALIDITY, not for the mailboxes the namespace holds (since my understanding is that the uidvalidities of mailboxes are stored in the first line of dovecot-uidlist files), but for the namespace itself (in case it is destroyed and then recreated for instance). Am I right ? Why 2 files ? Second setup ------------- I follow the 'Shared subscriptions' section of the wiki : drw-r-s--- 4 root doveshared 4096 Jan 30 14:19 public -rw-r----- 1 root doveshared 18 Jan 30 13:38 public/subscriptions As expected, dovecot (and it shows in the logs), has not sufficient permissions to create the files above (dovecot-acl-list, dovecot-uidvalidity, dovecot-uidvalidity.4982fa7a). What are the consequences ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 3

[Dovecot] help: "dovecot: pipe() failed: Too many open files"
by Jake Grimmett 06 Feb '09

06 Feb '09

Dear All, I'm having an intermittent problem, with dovecot slowing to a crawl. Restarting dovecot fixes the problem. Looking at the maillog, I see loads of these errors.... dovecot: pipe() failed: Too many open files dovecot: Temporary failure in creating login processes, slowing down for now dovecot: Created login processes successfully, unstalling looking at the processes, I can see ~200 imap-login's and about ~700 imap's there are 1000 email accounts on the server - half of which are in regular use. The server is Dell PE1950 running dovecot (1.0.7-2.el5) as supplied with Centos 5.2 (~Redhat AS 5.2) in 64 bit mode. I've upgraded the server from 4 to 8GB of RAM, and from a dual core 1.5Ghz xeon, to a quad core 1.5GHz xeon, and this does not seem to help. The following settings were increased by me to try and stop this problem - but did not have an obvious effect: login_process_size = 128 login_process_per_connection = yes login_max_processes_count = 512 Other parameters were left commented out: #max_mail_processes = 1024 #auth_process_size = 256 If anyone has any ideas about where I might be going wrong, please let me know..! many thanks Jake -- Dr Jake Grimmett Head Of Scientific Computing MRC Laboratory of Molecular Biology Hills Road, Cambridge, CB2 0QH, UK. Phone 01223 402219 Mobile 0776 9886539

3 4